Уязвимость CVE-2021-30860: Информация

Описание

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Важность: HIGH (7,8) Вектор: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-30860
Опубликовано: 24 августа 2021 г.
Изменено: 2 февраля 2024 г.
Идентификатор типа ошибки: CWE-190

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
poppler-currentsisyphus22.11.0-alt123.08.0-alt4ALT-PU-2022-3233-1310791Исправлено
poppler-currentsisyphus_e2k22.11.0-alt123.08.0-alt4ALT-PU-2022-7258-1-Исправлено
poppler-currentsisyphus_riscv6422.11.0-alt123.08.0-alt4ALT-PU-2022-7246-1-Исправлено
poppler-currentp1022.11.0-alt123.08.0-alt3ALT-PU-2022-3233-1310791Исправлено
poppler115p10_e2k21.11.0-alt1.p10.121.11.0-alt5ALT-PU-2023-2280-1-Исправлено
poppler115c10f121.11.0-alt1.p10.121.11.0-alt1.p10.1ALT-PU-2023-1100-1313730Исправлено
xpdfsisyphus4.04-alt14.05-alt1ALT-PU-2022-1867-1300016Исправлено
xpdfsisyphus_e2k4.04-alt14.04-alt1ALT-PU-2022-4977-1-Исправлено
xpdfsisyphus_riscv644.04-alt14.04-alt1ALT-PU-2022-4967-1-Исправлено
xpdfp104.04-alt14.04-alt1ALT-PU-2022-2449-1305300Исправлено
xpdfp10_e2k4.04-alt14.04-alt1ALT-PU-2022-5901-1-Исправлено
xpdfc10f14.04-alt14.04-alt1ALT-PU-2022-2449-1305300Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://support.apple.com/en-us/HT212804
  • Vendor Advisory
https://support.apple.com/en-us/HT212805
  • Vendor Advisory
https://support.apple.com/en-us/HT212807
  • Vendor Advisory
https://support.apple.com/en-us/HT212806
  • Vendor Advisory
20210917 APPLE-SA-2021-09-13-4 Security Update 2021-005 Catalina
  • Mailing List
  • Third Party Advisory
20210917 APPLE-SA-2021-09-13-3 macOS Big Sur 11.6
  • Mailing List
  • Third Party Advisory
20210917 APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8
  • Mailing List
  • Third Party Advisory
20210917 APPLE-SA-2021-09-13-2 watchOS 7.6.2
  • Mailing List
  • Third Party Advisory
20210921 APPLE-SA-2021-09-20-8 Additional information for APPLE-SA-2021-09-13-4 Security Update 2021-005 Catalina
  • Mailing List
  • Third Party Advisory
20210921 APPLE-SA-2021-09-20-6 Additional information for APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8
  • Mailing List
  • Third Party Advisory
20210921 APPLE-SA-2021-09-20-7 Additional information for APPLE-SA-2021-09-13-3 macOS Big Sur 11.6
  • Mailing List
  • Third Party Advisory
https://support.apple.com/kb/HT212824
  • Vendor Advisory
20210924 APPLE-SA-2021-09-23-1 iOS 12.5.5
  • Mailing List
  • Third Party Advisory
[oss-security] 20220902 JBIG2 integer overflow fixed in Xpdf 4.04, Poppler 22.09.0
  • Mailing List
GLSA-202209-21
  • Third Party Advisory

    1. Конфигурация 1

      cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
      Start including
      10.15
      End excliding
      10.15.7
      cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
      cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
      cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
      cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
      cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
      cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
      cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
      End excliding
      14.8
      cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
      End excliding
      7.6.2
      cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
      End excliding
      11.6
      cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
      cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
      Start including
      13.0
      End excliding
      14.8
      cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
      End excliding
      12.5.5

      Конфигурация 2

      cpe:2.3:a:xpdfreader:xpdf:*:*:*:*:*:*:*:*
      End excliding
      4.04

      Конфигурация 3

      cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
      End excliding
      22.09.0
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Версия: v24.5.0
Наверх